Privacy Notice

1. Who we are

ADASCertify.com operates the ADASCertify platform at adascertify.com. We are the data controller for the personal data described here — we decide why and how it is processed. Contact: privacy@adascertify.com.

2. Personal data we collect

• Account data — first and last name, email address, password credentials, role (admin, manager, technician), shop name and shop address.
• Work product data — repair orders, VINs, estimate documents, customer and carrier names contained in those documents, calibration evidence photos, pre/post-scan logs and technician digital signatures.
• Support data — messages and attachments you send us.
• Usage and device data — log records, IP address, browser and device identifiers, pages viewed and actions taken, error diagnostics.

Payment card details are collected and processed by Paddle at checkout; we do not receive or store them.

3. Why we use it, and our legal basis

• Creating and administering your account, and providing the Service (parsing estimates, generating packets, sharing verification links) — performance of a contract.
• Security, abuse and fraud prevention, and keeping records of who submitted evidence — legitimate interests.
• Product improvement, diagnostics and analytics — legitimate interests.
• Customer support — performance of a contract and legitimate interests.
• Marketing emails about the Service — consent, withdrawable at any time.
• Tax, accounting and legal record-keeping — legal obligation.

4. Who we share it with

• Service providers / subprocessors — cloud hosting and database, file storage, email delivery, AI document-reading providers used to extract data from uploaded estimates, error monitoring and analytics tooling.
• Paddle, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing.
• Recipients you choose — insurers, adjusters or vendors you email a packet to or send a verification link to.
• Professional advisers — legal and accounting.
• Authorities where required by law.

We do not sell personal data.

5. International transfers

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

6. Retention

Account data is kept while your account is active and for up to 12 months after closure. Compliance packets and evidence are retained for the period needed to support your liability record, by default 7 years, unless you ask us to delete them sooner. Billing records are kept as long as tax law requires. Data no longer needed is deleted or anonymised.

7. Your rights

Depending on where you live, you may request access to your data, correction, deletion, restriction or objection to processing, portability, and withdrawal of consent. UK/EEA residents may also complain to their supervisory authority. Email privacy@adascertify.com and we will respond within one month.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit and at rest, row-level access controls scoping data to your shop, signed time-limited links for stored files, and least-privilege access for staff.

9. Cookies

We use essential cookies and local storage to keep you signed in and to preserve in-progress repair orders — these cannot be turned off without breaking the Service. We may use limited analytics cookies to understand usage. We do not use advertising cookies. You can clear or block cookies in your browser settings, though sign-in will stop working.

10. Changes

We will post updates to this notice on this page with a new effective date and, for material changes, notify account holders by email.